last executing test programs: 37.089598853s ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000180)='+', 0x1) 36.959130658s ago: executing program 0 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x84042, 0x9e) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.540114347s ago: executing program 0 (id=16): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xa5d6043eb9598c47, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) umount2(0x0, 0xf) 36.269147479s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='10', 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 35.729860303s ago: executing program 0 (id=18): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8020802, 0xa, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) 32.398985707s ago: executing program 0 (id=19): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000) 4.490327791s ago: executing program 1 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 3.999148078s ago: executing program 1 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.219290598s ago: executing program 1 (id=31): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)='0 ', 0x2}, {&(0x7f0000000480)='4 ', 0x2}, {&(0x7f00000004c0)='0 3', 0x3}], 0x3) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x6000, &(0x7f0000000540)=[{&(0x7f0000000580)='U', 0xa00120}], 0x1}, 0x3) 1.21600386s ago: executing program 1 (id=32): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x11) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40804) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x20004000) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x101002, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x842) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) 340.570101ms ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, 0x0, 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='10', 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 0s ago: executing program 1 (id=34): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'comedi_parport\x00', [0x8000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x7, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x240089, 0x2, 0x4, 0x30001e59, 0x5, 0x9, 0x3, 0x6, 0x4006, 0x0, 0x3]}) kernel console output (not intermixed with test programs): [ 45.029581][ T28] audit: type=1400 audit(44.940:91): avc: denied { read write } for pid=3101 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.030338][ T28] audit: type=1400 audit(44.940:92): avc: denied { open } for pid=3101 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:5893' (ED25519) to the list of known hosts. [ 63.421088][ T28] audit: type=1400 audit(63.320:93): avc: denied { name_bind } for pid=3104 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.244361][ T28] audit: type=1400 audit(64.150:94): avc: denied { execute } for pid=3105 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.249584][ T28] audit: type=1400 audit(64.160:95): avc: denied { execute_no_trans } for pid=3105 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.658066][ T28] audit: type=1400 audit(67.570:96): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.661517][ T28] audit: type=1400 audit(67.570:97): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.678455][ T3105] cgroup: Unknown subsys name 'net' [ 67.686723][ T28] audit: type=1400 audit(67.590:98): avc: denied { unmount } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.845024][ T3105] cgroup: Unknown subsys name 'cpuset' [ 67.851078][ T3105] cgroup: Unknown subsys name 'hugetlb' [ 67.851529][ T3105] cgroup: Unknown subsys name 'rlimit' [ 68.033098][ T28] audit: type=1400 audit(67.930:99): avc: denied { setattr } for pid=3105 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.033234][ T28] audit: type=1400 audit(67.930:100): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.033264][ T28] audit: type=1400 audit(67.930:101): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.223534][ T3107] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.225460][ T28] audit: type=1400 audit(68.130:102): avc: denied { relabelto } for pid=3107 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 75.033932][ T3105] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.357352][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 77.357463][ T28] audit: type=1400 audit(77.260:106): avc: denied { execmem } for pid=3108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.396413][ T28] audit: type=1400 audit(77.300:107): avc: denied { read } for pid=3110 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.397478][ T28] audit: type=1400 audit(77.310:108): avc: denied { open } for pid=3110 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.401450][ T28] audit: type=1400 audit(77.310:109): avc: denied { mounton } for pid=3110 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.426502][ T28] audit: type=1400 audit(77.330:110): avc: denied { module_request } for pid=3110 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.505398][ T28] audit: type=1400 audit(77.410:111): avc: denied { sys_module } for pid=3110 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.124369][ T28] audit: type=1400 audit(78.030:112): avc: denied { ioctl } for pid=3110 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.425140][ T3110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.429013][ T3111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.432916][ T3111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.449483][ T3110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.294767][ T3111] hsr_slave_0: entered promiscuous mode [ 80.302104][ T3111] hsr_slave_1: entered promiscuous mode [ 80.552280][ T3110] hsr_slave_0: entered promiscuous mode [ 80.553939][ T3110] hsr_slave_1: entered promiscuous mode [ 80.554731][ T3110] debugfs: 'hsr0' already exists in 'hsr' [ 80.555085][ T3110] Cannot create hsr debugfs directory [ 80.823139][ T28] audit: type=1400 audit(80.730:113): avc: denied { create } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.825604][ T28] audit: type=1400 audit(80.730:114): avc: denied { write } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.825702][ T28] audit: type=1400 audit(80.730:115): avc: denied { read } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.842393][ T3111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.855683][ T3111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.870551][ T3111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.880214][ T3111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.882772][ T3111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.890920][ T3111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.912712][ T3111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.919492][ T3111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.111944][ T3110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.122844][ T3110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.125620][ T3110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.135397][ T3110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.141214][ T3110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.153202][ T3110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.159542][ T3110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.165659][ T3110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.807814][ T3111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.014890][ T3110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.738342][ T3111] veth0_vlan: entered promiscuous mode [ 84.757562][ T3111] veth1_vlan: entered promiscuous mode [ 84.849833][ T3111] veth0_macvtap: entered promiscuous mode [ 84.870443][ T3111] veth1_macvtap: entered promiscuous mode [ 84.978696][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.979644][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.979850][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.074122][ T28] audit: type=1400 audit(84.980:116): avc: denied { mount } for pid=3111 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.093420][ T28] audit: type=1400 audit(85.000:117): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/syzkaller.HN9tIe/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.103544][ T28] audit: type=1400 audit(85.010:118): avc: denied { mount } for pid=3111 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.104058][ T3110] veth0_vlan: entered promiscuous mode [ 85.119202][ T28] audit: type=1400 audit(85.030:119): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/syzkaller.HN9tIe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 85.122488][ T28] audit: type=1400 audit(85.030:120): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/syzkaller.HN9tIe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 85.134344][ T3110] veth1_vlan: entered promiscuous mode [ 85.142899][ T28] audit: type=1400 audit(85.050:121): avc: denied { unmount } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.150062][ T28] audit: type=1400 audit(85.060:122): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 85.152461][ T28] audit: type=1400 audit(85.060:123): avc: denied { mount } for pid=3111 comm="syz-executor" name="/" dev="gadgetfs" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 85.159435][ T28] audit: type=1400 audit(85.070:124): avc: denied { mount } for pid=3111 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.159703][ T2424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.168232][ T28] audit: type=1400 audit(85.070:125): avc: denied { mounton } for pid=3111 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.245482][ T3110] veth0_macvtap: entered promiscuous mode [ 85.254359][ T3111] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.274856][ T3110] veth1_macvtap: entered promiscuous mode [ 85.387629][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.388568][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.388643][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.388703][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.657286][ T714] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.306521][ T714] usb 2-1: Using ep0 maxpacket: 32 [ 88.310604][ T714] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 88.330487][ T714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.330736][ T714] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 88.330959][ T714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.340656][ T714] usb 2-1: config 0 descriptor?? [ 88.351270][ T714] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 94.981001][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 94.981125][ T28] audit: type=1400 audit(94.890:138): avc: denied { mount } for pid=3760 comm="syz.0.14" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 94.992527][ T3761] bonding: no command found in bonding_masters - use +ifname or -ifname [ 95.005362][ T28] audit: type=1400 audit(94.910:139): avc: denied { unmount } for pid=3110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.114016][ T28] audit: type=1400 audit(95.020:140): avc: denied { map_create } for pid=3762 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.123855][ T28] audit: type=1400 audit(95.030:141): avc: denied { map_read map_write } for pid=3762 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.157247][ T28] audit: type=1400 audit(95.060:142): avc: denied { perfmon } for pid=3762 comm="syz.0.15" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.210869][ T28] audit: type=1400 audit(95.120:143): avc: denied { prog_run } for pid=3762 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.849906][ T28] audit: type=1400 audit(99.760:144): avc: denied { bind } for pid=3772 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.862070][ T28] audit: type=1400 audit(99.760:145): avc: denied { setopt } for pid=3772 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.401549][ T44] usb 2-1: USB disconnect, device number 2 [ 103.170717][ T3784] [U]  [ 103.170930][ T3784] [U] K{‘ [ 103.171268][ T3784] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 103.172453][ T3784] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 103.172941][ T3784] [U] ±K\&—}6£6œXÎHX� ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯À ÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 103.174835][ T3784] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 103.220593][ T3784] [U] +�W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 103.233379][ T3784] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 103.233908][ T3784] [U] ½?�©ß HÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 103.234645][ T3784] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`Ʀ\ [ 103.240382][ T3784] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆÈ½ [ 103.251612][ T3784] [U] I,Ç>ÇÓ¤ ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 103.251777][ T3784] [U] 22½“Æ©ÐÛ©X?0;3U± [ 103.252922][ T3784] [U] ÞœÕÆ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)�KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 103.253320][ T3784] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 103.253647][ T3784] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 103.253850][ T3784] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©� [ 103.254353][ T3784] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 103.254398][ T3784] [U] ¹ EC� [ 103.254897][ T3784] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 103.286945][ T3783] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 119.782189][ T3796] Illegal XDP return value 4294967294 on prog (id 2) dev N/A, expect packet loss! [ 120.131036][ T28] audit: type=1400 audit(120.040:146): avc: denied { mount } for pid=3797 comm="syz.1.26" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 120.206783][ T28] audit: type=1400 audit(120.110:147): avc: denied { unmount } for pid=3111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 120.492251][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 128.376488][ T28] audit: type=1400 audit(128.280:148): avc: denied { append } for pid=3806 comm="syz.1.30" name="tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.256371][ T28] audit: type=1400 audit(129.160:149): avc: denied { create } for pid=3812 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.048055][ T28] audit: type=1400 audit(130.940:150): avc: denied { mount } for pid=3815 comm="syz.1.32" name="/" dev="configfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 131.067990][ T28] audit: type=1400 audit(130.980:151): avc: denied { search } for pid=3815 comm="syz.1.32" name="/" dev="configfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.068786][ T28] audit: type=1400 audit(130.980:152): avc: denied { search } for pid=3815 comm="syz.1.32" name="nullb" dev="configfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.069958][ T28] audit: type=1400 audit(130.980:153): avc: denied { write search } for pid=3815 comm="syz.1.32" name="nullb" dev="configfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.070387][ T28] audit: type=1400 audit(130.980:154): avc: denied { add_name } for pid=3815 comm="syz.1.32" name="my_zoned_dev" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.071018][ T28] audit: type=1400 audit(130.980:155): avc: denied { create } for pid=3815 comm="syz.1.32" name="my_zoned_dev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 131.123251][ T28] audit: type=1400 audit(131.030:156): avc: denied { search } for pid=3815 comm="syz.1.32" name="/" dev="configfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.123442][ T28] audit: type=1400 audit(131.030:157): avc: denied { search } for pid=3815 comm="syz.1.32" name="nullb" dev="configfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.553665][ T3816] null_blk: disk my_zoned_dev created [ 132.269717][ T3822] 8<--- cut here --- [ 132.269864][ T3822] Unable to handle kernel paging request at virtual address fee08000 when write [ 132.269962][ T3822] [fee08000] *pgd=80000080007003, *pmd=00000000 [ 132.271698][ T3822] Internal error: Oops: a06 [#1] SMP ARM [ 132.275819][ T3822] Modules linked in: [ 132.278213][ T3822] CPU: 0 UID: 0 PID: 3822 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT [ 132.283646][ T3822] Hardware name: ARM-Versatile Express [ 132.286381][ T3822] PC is at parport_attach+0x5c/0x1e8 [ 132.287911][ T3822] LR is at parport_attach+0x50/0x1e8 [ 132.288218][ T3822] pc : [<814d95f8>] lr : [<814d95ec>] psr: 60000013 [ 132.288528][ T3822] sp : df9b5d30 ip : df9b5d30 fp : df9b5d54 [ 132.288825][ T3822] r10: 835316f0 r9 : 00000003 r8 : 84b52cc0 [ 132.289378][ T3822] r7 : df9b5d90 r6 : df9b5d90 r5 : 84b52cc0 r4 : 00000000 [ 132.290680][ T3822] r3 : fee08000 r2 : 00000000 r1 : 00000000 r0 : 00000000 [ 132.291392][ T3822] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 132.291825][ T3822] Control: 30c5387d Table: 86a68080 DAC: fffffffd [ 132.292162][ T3822] Register r0 information: NULL pointer [ 132.292880][ T3822] Register r1 information: NULL pointer [ 132.293181][ T3822] Register r2 information: NULL pointer [ 132.293439][ T3822] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 132.294036][ T3822] Register r4 information: NULL pointer [ 132.294299][ T3822] Register r5 information: slab kmalloc-192 start 84b52cc0 pointer offset 0 size 192 [ 132.295524][ T3822] Register r6 information: 2-page vmalloc region starting at 0xdf9b4000 allocated at kernel_clone+0xc4/0x440 [ 132.296206][ T3822] Register r7 information: 2-page vmalloc region starting at 0xdf9b4000 allocated at kernel_clone+0xc4/0x440 [ 132.300490][ T3822] Register r8 information: slab kmalloc-192 start 84b52cc0 pointer offset 0 size 192 [ 132.308112][ T3822] Register r9 information: non-paged memory [ 132.309586][ T3822] Register r10 information: non-slab/vmalloc memory [ 132.310787][ T3822] Register r11 information: 2-page vmalloc region starting at 0xdf9b4000 allocated at kernel_clone+0xc4/0x440 [ 132.313211][ T3822] Register r12 information: 2-page vmalloc region starting at 0xdf9b4000 allocated at kernel_clone+0xc4/0x440 [ 132.313797][ T3822] Process syz.1.34 (pid: 3822, stack limit = 0xdf9b4000) [ 132.314318][ T3822] Stack: (0xdf9b5d30 to 0xdf9b6000) [ 132.314702][ T3822] 5d20: ffffffff 00000004 833d88c0 81e32f28 [ 132.315209][ T3822] 5d40: 00000000 df9b5d90 df9b5d8c df9b5d58 814d5288 814d95a8 40946400 00000000 [ 132.315570][ T3822] 5d60: df9b5d7c 20001a00 84b52cc0 b5403587 40946400 00000003 00000003 85a03e80 [ 132.316083][ T3822] 5d80: df9b5e4c df9b5d90 814d0a8c 814d518c 656d6f63 705f6964 6f707261 00007472 [ 132.316586][ T3822] 5da0: 00000000 00008000 00000020 00000004 20000001 00000025 00000000 00000400 [ 132.317045][ T3822] 5dc0: 00000002 54c6cff3 000000fd 00000002 00000007 fffffff7 00400001 00000006 [ 132.317400][ T3822] 5de0: 00000008 00000000 0000007f 00000003 40000003 00240089 00000002 00000004 [ 132.317890][ T3822] 5e00: 30001e59 00000005 00000009 00000003 00000006 00004006 00000000 00000003 [ 132.318248][ T3822] 5e20: 00000000 bd2d471f 00000000 8402dd00 84b52cc0 20001a00 40946400 00000003 [ 132.318617][ T3822] 5e40: df9b5f14 df9b5e50 814d1db4 814d09cc 00000000 bd2d471f 00000000 00000000 [ 132.325467][ T3822] 5e60: 8254886c df9b5ea4 0000005f 84aee058 00000064 84b52cf0 df9b5ee4 df9b5e88 [ 132.326530][ T3822] 5e80: 8082bd0c 80822098 00000064 00000001 00000000 df9b5ea4 8698a410 83ce6660 [ 132.326883][ T3822] 5ea0: 00006400 0000000b df9b5e98 00000000 00000000 bd2d471f 00000000 8402dd00 [ 132.327216][ T3822] 5ec0: 40946400 20001a00 20001a00 8402dd00 00000003 85a03e80 df9b5ef4 df9b5ee8 [ 132.327566][ T3822] 5ee0: 8082be40 bd2d471f df9b5f14 00000000 8402dd01 40946400 20001a00 8402dd00 [ 132.327915][ T3822] 5f00: 00000003 85a03e80 df9b5fa4 df9b5f18 805d39dc 814d1a6c ecac8b10 85a03e80 [ 132.328261][ T3822] 5f20: df9b5f3c df9b5f30 81bb0d00 81bb0bcc df9b5f54 df9b5f40 8025b9d4 8028f74c [ 132.328745][ T3822] 5f40: df9b5fb0 40000000 df9b5f84 df9b5f58 80221bdc 8025b98c 00000000 8321a04c [ 132.329242][ T3822] 5f60: df9b5fb0 0013ec60 ecac8b10 80221b30 00000000 bd2d471f df9b5fac 00000000 [ 132.329601][ T3822] 5f80: 00000000 00356310 00000036 8020029c 85a03e80 00000036 00000000 df9b5fa8 [ 132.329950][ T3822] 5fa0: 80200060 805d37a4 00000000 00000000 00000003 40946400 20001a00 00000000 [ 132.330290][ T3822] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f0e0dc [ 132.330613][ T3822] 5fe0: 76f0de88 76f0de78 00019004 00130ac0 60000010 00000003 00000000 00000000 [ 132.331053][ T3822] Call trace: [ 132.331582][ T3822] [<814d959c>] (parport_attach) from [<814d5288>] (comedi_device_attach+0x108/0x244) [ 132.332300][ T3822] r7:df9b5d90 r6:00000000 r5:81e32f28 r4:833d88c0 [ 132.332645][ T3822] [<814d5180>] (comedi_device_attach) from [<814d0a8c>] (do_devconfig_ioctl+0xcc/0x218) [ 132.333139][ T3822] r10:85a03e80 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:84b52cc0 [ 132.333487][ T3822] r4:20001a00 [ 132.333651][ T3822] [<814d09c0>] (do_devconfig_ioctl) from [<814d1db4>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 132.334073][ T3822] r8:00000003 r7:40946400 r6:20001a00 r5:84b52cc0 r4:8402dd00 [ 132.334343][ T3822] [<814d1a60>] (comedi_unlocked_ioctl) from [<805d39dc>] (sys_ioctl+0x244/0xb5c) [ 132.334757][ T3822] r10:85a03e80 r9:00000003 r8:8402dd00 r7:20001a00 r6:40946400 r5:8402dd01 [ 132.335068][ T3822] r4:00000000 [ 132.335226][ T3822] [<805d3798>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 132.335586][ T3822] Exception stack(0xdf9b5fa8 to 0xdf9b5ff0) [ 132.336053][ T3822] 5fa0: 00000000 00000000 00000003 40946400 20001a00 00000000 [ 132.336451][ T3822] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f0e0dc [ 132.336923][ T3822] 5fe0: 76f0de88 76f0de78 00019004 00130ac0 [ 132.343247][ T3822] r10:00000036 r9:85a03e80 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 132.345971][ T3822] r4:00000000 [ 132.346587][ T3822] Code: ebb57197 e5953064 e7f33053 e2433612 (e5c34000) [ 132.349829][ T3822] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 132.432802][ T3822] Kernel panic - not syncing: Fatal exception [ 132.438394][ T3822] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:15:12 Registers: info registers vcpu 0 CPU#0 R00=83484aa0 R01=00000000 R02=00000000 R03=85a03e80 R04=85a03e80 R05=82327f00 R06=83404283 R07=83b6da00 R08=00000002 R09=00000eee R10=00000000 R11=df9b5b6c R12=00000018 R13=df9b5b10 R14=0054504d R15=81b8178c PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=a0798000 R01=ea3bf000 R02=00000000 R03=802397d0 R04=834d73a0 R05=834d7fe4 R06=7f00d000 R07=ea3bf000 R08=00000000 R09=00000001 R10=8320b4d8 R11=dffe5dc4 R12=ea3bf000 R13=dffe5da0 R14=802306a4 R15=802397e8 PSR=80000113 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000